. Appln. No. ]Q/500,3n .. Attomejr Docket No. T2678-9156yS01 s 

■-'DRAFT.- ■ ■■ ■i 

. Amendments. to the Claims : 

This listing of claims will replace all prior versions, and listings, of clainis in 
- ' the application: 

• Listing of Claims : 

Clainis 1-1 8.. (canceled) 

19. (currently amended) A group signature device for providing a message . 
'. ] (ni) ac<x)mpanied by a group signature (S), comprising: 

means for storing personalized data (z, Kz) identifying individual 
::]:':' : \ ^ ■ [ : member.(]VI)of agroup(G); 

encryption means (B3) for producing an encrypted text (C), intended to , 
be associated with said message (m), using said personalized data (z. Kz) of one said 
individual member (M) only : * 

signing means (B6) for producing the group signature (S) with .a private 
.signature key (SK) common to all group members using the message to be signed (m) 
and said encrypted text (C) produced using the personalized data (z, Kz) of said one 
individual niernber (M) only; and 

means for outputting the niessage (m) and.th^ group signature (S) to a 
. • : : : ' . . . checker, such that the checker, upon receiving the message accompanied by the group . 
: : : ; : signature, is able to verify that the.message.(ni) is associated with the group (G) based 
on the group signature (S), with the identity of the individual member (M) of the . ... 
group (G):remaining anonymous to the checker, . 

Claim 20. (canceled) 
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21. (previously presented) A group signature device according to claim 19, 
. . further, comprising: 

means (B5) for combining the message (m) to be signed and the encrypted text 
. (C) in the form of a concatenation of the message (m) with the encrypted text (C). 

■ • Claim 22. (canceled) / 

23. (previously presented) A group signature device according to claim 19, , 
wherein. " * ■ "\ '"'-. 
: . said personalized. data is an identifier (z) personal to the individual member 

S.-^- ; XM);. ■• - ■■■ ■ . 

said means for storing further includes^n encryption key (K) common to all 
; : members of the group (G); and 

encryption means (B3) produces said, encrypted text (C) using the identifier, (z) ; 
..and said encryption key (K). 

24. (previously presented) A group signature device according to claim 23, in : 
: which encryption means. (B3) produces said encrypted text. (C) using the identifier (z) 

■ : . ■ and. a random nximber (r). 

25. (previously.presen^^ 



..wherein 
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said personalized data is a diversified encryption key (Kz) ^ecific to. ^ach 
member (M) of the group (G); and 

encryption means (BS^produces said encrypted text (C) using at least one data 
and said divei^ified encr)^ 



26. (previously presented) A group signature device :accprding to claim 25, 
wherein said. at least one data includes a.random number (r). 

27. (previously presented) A group signature device according to claim. 19, 
Jwherein the encryption means (B3) uses a secret key ejicryption algorithm. 

28. (previously presented) A group signature device according to claim 19,. 
wherein the encryption means (B3) uses one of the Rivest, Shamir, Adleman (RSA) 
public key encryption algorithm or the Advanced Encryption Staiidard (AES) secret 
key encryption algorithm. 

29. (previously presented) A group signature device according to claim 1 9, 
wherein the signing means (B6) uses a private key signature algorithm (SK). 

30. (previously presented) A group signature device according to claim 29, in 
which the private key signature algorithm is of the Riyest, Sham.ir, Adleman (RSA) 
type. ■•• \ x... ■■• '■• 
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31. (previously presented) A group signature device according to claim 19, in . 
which said group. signature device is a portable communicating device. 

32. (previously presented) A group signature device according to claim 31, in 
which said portable commumcating device is a sinart card. 

33. (currently amended) A method for secure communication of message (m) 
sent by an individual member (M) of a group (G) using a group signature (S), said 
method comprising:. 

producing the group signature (S) of the message (m) by signing, with .a 
private signature key (SK) common to all group, members, a set including the message. 
(m) and encrypted text (C) produced using a personalized .data (z, Kz) of said one 
individual member (M) only; and 
: : : outputting the message (m) along with th€;.jgroup signature (S). 

• 34. (previously presented) The method according to claim 33, further 

comprising: 

verifying, by using a public key (PK) corresponding to said private signature : 
key (SK), that the message (m) is associated with the group (G) based, on the group 
signature (S), without identifying the individual member (M) of the group (G). 

35. (previously presented) .The method according to claim 33, fiirt^ ^ 
comprising.the steps of: 
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decrypting the encrypted text (C) thus obtaining the personalized data (z, 
. Kz); and identilying the individual nieniber (M) of 
personalized data (z, Kz). . " 

36.. . (previously presented) The method of claini. 3 5, further comprising: 
^. producing a private signature key (SK) common to all members of group . 

producing personalized data (z, Kz) identifying the individual member 
(M) apcepted into the group (G); and 

registering said personalized data. (z, Kz) with the private signature key 
: (SK) in an electronic device personali?:ed to 

\ \ (Qx . ■ : , ' •. ;:; ; > ' - ■••/^ ' ■ • . " 

' Claims 37-38. (canceled) . 

39, (currently amended) A group signature system for ensuring a secure 
ponmiunication of a message (m) sent by an individual member (M) of a group (G) 
using a group signature (S), said group signature system comprising: 

an electronic device configured to store a personalized data (z, Kz) 
. . identifying tbe- giie said individual member (M) of the group (G), to produce an 
^ encrypted text (C) intended to be asspciated wt^ 

personalized data (z, Kz) of gajd ffl^ individual member gN4'|^ and to produce the . 
. group signature (S) with a private signature key (SK) common to all group members 
using.the message (m) and said encrypted text (C) produced using the personalized 
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data (z,.Kz) of sai d one individual member (M) only, and to output the message (m) i ♦ 
■ . and the group signature (S); " 

a checker that receives the message (ra) accompanied by the group .. . { : 
' : signature (S) output from the electronic device, said checker being configured to 

: • verify that the message (m) is associated with the group (G) based on the group i 

signature (S), the identity of the individual member ^M) remaining anonynio.us to the , | 

checker; and ■ " j 

a tmsted authojrity configured to identify the indi\i.dual member (M) of . | 

, the gjx)up (G). „ ■ . I ■ 

■ J : ■ , Claim 40. (canceled) ; 



*■ i 
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